Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    40126767bf28d05e060d06c6233d4544_JaffaCakes118

  • Size

    165KB

  • Sample

    241013-qkdnfstajr

  • MD5

    40126767bf28d05e060d06c6233d4544

  • SHA1

    6ecd6a4890cac261fba621756d2b1ab493e98361

  • SHA256

    147b690a3b4eb0d6033e2394c55b019cc9e99b20c59dc22b892911e760aeaf4f

  • SHA512

    21a439ae33c83e9fe1dd7023a943b695a8b3dd0b5ea70e95a47fe0cef53f77ff897c695a40dafa6273c50c1402d95a118ef7aa1ccca0dab0c861bc48b539ef32

  • SSDEEP

    3072:y4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:piI/PlY37ZLF4Ca6WABqBOvs

Score
7/10

Malware Config

Targets

    • Target

      40126767bf28d05e060d06c6233d4544_JaffaCakes118

    • Size

      165KB

    • MD5

      40126767bf28d05e060d06c6233d4544

    • SHA1

      6ecd6a4890cac261fba621756d2b1ab493e98361

    • SHA256

      147b690a3b4eb0d6033e2394c55b019cc9e99b20c59dc22b892911e760aeaf4f

    • SHA512

      21a439ae33c83e9fe1dd7023a943b695a8b3dd0b5ea70e95a47fe0cef53f77ff897c695a40dafa6273c50c1402d95a118ef7aa1ccca0dab0c861bc48b539ef32

    • SSDEEP

      3072:y4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:piI/PlY37ZLF4Ca6WABqBOvs

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks